How to Turn On Two-Factor Authentication on Facebook (2026)

If your Facebook login is the only thing between a stranger and your photos, your messages and perhaps your business Page, a password alone is a thin lock. Two-factor authentication adds a second check, and it takes about five minutes to set up. If you run anything through Facebook, it's one of the best small jobs you can do today.

Here are the steps from Facebook's help centre for a computer and the Android app, the three methods you can choose from, and how to get back in if something goes wrong.

What two-factor authentication on Facebook does

Facebook's help centre describes it as a security feature that helps protect your Facebook account and password. Once it's on, you'll be asked to enter a special login code or confirm your login attempt each time someone tries to access your Facebook from a browser or mobile device that Facebook doesn't recognise. You can also get alerts about unrecognised logins.

Turning on two-factor authentication on Facebook from a computer

1. Click your profile picture in the top right, then click Settings and privacy.
2. Click Settings.
3. Click Accounts Centre, then click Password and security.
4. Click Two-factor authentication, then click the account you'd like to update.
5. Choose the security method you want to add and follow the on-screen instructions.

Facebook says to make sure you're viewing your personal profile before you start, and that not everyone can see every setting in Accounts Centre yet. If the steps don't match your screen, Facebook's alternative is to open your Security and login settings, scroll to Use two-factor authentication and click Edit.

Turning on two-factor authentication in the Facebook app on Android

1. Tap Menu in the top left of Facebook.
2. Scroll down and tap Settings & privacy, then tap Settings.
3. Tap Accounts Centre, then tap Password and security.
4. Scroll down and tap Two-factor authentication, then tap the account you'd like to update.
5. Choose the security method you want to add and follow the on-screen instructions.

I've only confirmed the Android wording in the help centre. On an iPhone, menus vary by app version, so follow the same path and look for Accounts Centre and then Password and security.

The three security methods for Facebook two-factor authentication

When you turn it on, Facebook says you'll be asked to choose one of three methods:

Method	How it works, per Facebook's help centre
Security key	You tap a security key on a compatible device
Authentication app	You use login codes from a third-party authentication app
Text message (SMS)	You use codes sent to your mobile device

Pick whichever you'll reliably have with you. Facebook also says you can get ten recovery login codes to use when you can't use your phone, which I'll come to below.

Setting up text message codes for Facebook

In the same Two-factor authentication screen, click Text message (SMS), then Next, and select a phone number already on your account or add a new one. Facebook says the codes are always six digits long, and you'll be sent one each time someone tries to log in from a device or browser it doesn't recognise.

The help pages add some good advice. Once text message codes are on, set up a second security feature as well, such as a security key, trusted contacts or recovery codes, so you're protected if your phone is lost, stolen or hacked. If you stop receiving texts, you may have turned off text messages from Facebook. Standard terms from your mobile provider apply to text messages.

Setting up an authentication app for Facebook

The help centre says an authentication app, such as Google Authenticator, can generate login codes that confirm it's you when you log in from a new device for the first time.

1. Install a third-party authentication app on your device, ideally the one you normally use for Facebook.
2. In Accounts Centre, go to Password and security, then Two-factor authentication, and choose your account.
3. Click Authentication app.
4. Follow the setup instructions, then click Next.
5. Enter the code the app generates, then click Next.

Facebook notes you can only add an app or another method while you still have access to your account, so set this up before you need it.

Getting Facebook recovery codes for two-factor authentication

Recovery codes are your emergency exit. Facebook says that once two-factor authentication is on, you can get ten recovery login codes to use when you can't use your mobile phone, and you enter one instead of your usual code.

1. In Accounts Centre, go to Password and security, then Two-factor authentication, and select the account.
2. You may need to re-enter your password.
3. Below How you get login codes, click Additional methods, then click Recovery codes.
4. Click Get new codes.

Print or write down the ten codes. Each one only works once. If you run out or lose them, you can click Get new codes to request more. Keep them somewhere safe, not in a note called passwords on the same phone.

Saving your browser when you turn on Facebook two-factor authentication

Facebook says that if you haven't saved the browser or device you're using, you'll be asked to save it when you turn on two-factor authentication, and then you won't need a code each time. Don't click Save this browser on a public computer that other people can use. The help pages also say that private browsing, or a browser that clears its history every time it closes, may mean you have to enter a security code on every login.

If two-factor authentication on Facebook locks you out

It happens, usually after a new phone. Facebook's help centre suggests trying these in order:

1. Wait for the text message. Codes can be delayed by your mobile network, so check again after a few minutes and make sure you have signal.
2. Approve the login from another device where you're already logged in. You may see a prompt in your notifications.
3. Use a recovery code, if you saved or printed them.

Once you're back in, update your methods so it doesn't happen again: add a new mobile number, set up a different authentication app or add a security key. Meta recommends keeping two-factor authentication on.

If none of that works, Facebook says you can ask it to confirm your identity from the two-factor screen. On a computer click Need another way to authenticate?, then Other options, then Get more help. On Android or mobile web tap Having trouble?, and on iPhone or iPad tap Need help? Facebook says instructions typically arrive within one to two working days. Never share a login code with anyone who contacts you, whatever they claim. Report the message to Facebook, and if you ever feel unsafe, contact the police.

Why two-factor authentication on Facebook matters for business owners

A hacked personal profile can take a business Page with it, along with every customer message inside it. If a Page matters to your work, two-factor authentication is the simplest protection you can add, and the setup is the same whether the account is personal or business. Once your login is secure, a tidy next job is sorting out the things customers use, such as the QR code, so see my answer on whether a Facebook Page comes with a QR code. And if you're curious about location alerts, here's what I found on Facebook and location.

For the rest of the series, see the Facebook Help: 80 Guides to Pages, Groups, Ads, Stories and Fixes.

Frequently asked questions

How do I turn on two-factor authentication on Facebook?

Go to Settings and privacy, then Settings, then Accounts Centre, then Password and security, then Two-factor authentication. Choose your account and a security method, and follow the on-screen instructions.

Which two-factor method should I choose on Facebook?

Facebook offers a security key, an authentication app or text message codes. Facebook also advises adding a second feature, such as recovery codes, so you're covered if you lose your phone.

How many recovery codes do I get?

Facebook says you can get ten recovery login codes, and each one can only be used once. You can request new ones with Get new codes.

What if I don't get my Facebook login code?

Wait a few minutes for the text, approve the login from another device you're logged in on, or use a recovery code. If those fail, you can ask Facebook to confirm your identity.

Should I click Save this browser?

Only on a device you own. Facebook says not to click it on a public computer that other people can access.